Extracted

• • Target

    4436d9380dfc13f613540e057f65733b078c3ea7bede2270bc070d1e8698cf2e.bin

  • Size

    760KB

  • MD5

    421173fd6a801508a585bf66b1d1a370

  • SHA1

    ea8de977f9f727a809b69cf9eb66cf0a334a3349

  • SHA256

    4436d9380dfc13f613540e057f65733b078c3ea7bede2270bc070d1e8698cf2e

  • SHA512

    acbaa6be20748818e75ec2c3f00edc3edd7ebcbbe1b22a4fcdd6298e7420f936be51ac461c69b41e249726164eceb744e05925f10f8826c10672b3ecb2ac246c

  • SSDEEP

    12288:UGDrAa1a8Lre/Fj+hVqE5WmpYshXZPbGwidNpgc+:Ia1a2e/8hVqE5WmD9idNp4

  Score

  8^/10

  bankerdiscoveryevasionpersistencestealthtrojan

  • Removes its main activity from the application launcher

    stealthtrojanevasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  behavioral1behavioral2behavioral3